CVE-2007-3219: High severity Invision Power Services Invision Power Board vulnerability
Published Jun 14, 2007
·Updated
Unspecified vulnerability in sources/actionpublic/xmlout.php in Invision Power Board (IPB or IP.Board) 2.2.0 through 2.2.2 allows remote attackers to modify another user's profile data, such as an AIM screen name or Yahoo! identity.
Affected Software
3 affected components
Invision Power Services Invision Power Board=2.2
Invision Power Services Invision Power Board=2.2.2
Invision Power Services Invision Power Board=2.2.1
Remediation
Patch Available
Event History
Jun 14, 2007
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-3219?
CVE-2007-3219 is considered a moderate severity vulnerability allowing unauthorized profile data modification.
2
How do I fix CVE-2007-3219?
To fix CVE-2007-3219, upgrade Invision Power Board to version 2.2.3 or later where the vulnerability has been addressed.
3
What software versions are affected by CVE-2007-3219?
CVE-2007-3219 affects Invision Power Board versions 2.2.0 through 2.2.2.
4
Can CVE-2007-3219 be exploited remotely?
Yes, CVE-2007-3219 can be exploited remotely by attackers to modify user profile data.
5
What type of data can be modified due to CVE-2007-3219?
CVE-2007-3219 allows the modification of sensitive user profile data, including AIM screen names and Yahoo! identities.